201108161354 jkuyr
explained decrypted manual
A masked GUID list: 8 GUIDs, seed 469. 3DES, key MD5 of the jkscb grid.
From the post to its content
As posted (encrypted)
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
- Build the password. Take the hex grid posted 14 minutes earlier in jkscb (hex-encoded ASCII), and remove all whitespace: 288 hex characters, which are themselves 9 masked GUIDs.
- Derive the key. Key = MD5 of that string =
bbb21a107025d1debbd16a38cf94bf5f. The jlcv0 GIF, posted 12 hours later, links to this post (redd.it/jkuyr). - Decrypt. 3DES-EDE2 in ECB mode, then strip the PKCS7 padding.
Decrypted: GUID list
1 306d4b85-cfc8-6434-9325-4e54c90f50a2 2 2c96b8f5-44a0-3014-bb82-097b80c6e2e7 3 3ca35df8-2710-5280-9e96-b1ab5ddafb9f 4 4a8ea723-0ae3-5877-a79a-87e7390387ae 5 cd30a70b-000b-8c80-9011-42fb41f579a3 6 c68c50a8-60c8-3df8-8e21-7c25408a2817 7 6a4342b0-e396-09ba-ba49-b9fb47be499b 8 a8e608c8-ac12-684b-b2e2-e75b2a42fa66
Explanation
- Explain the mask digits. The version nibble (13th hex digit) of each GUID, read in order, gives
63558306. Exactly this sequence comes out ofnew Random(469).Next(9): the per-post millisecond seed of the mask generator. The other 30 hex digits of each GUID areGuid.NewGuid()output and carry no message. - Explain the count. Grouped in Before the scheduler: before the scheduled app (Jun 26 2012): sparse single tool runs / hand lists (o5o4o, jbucr, jkuyr), 2011 genuine-v4 lists; no long-lived count stream to fit
Solution summary
- Method
- 3DES-ECB, key = raw sidebar MD5 bbb21a10... (MD5 of jkscb's grid, used directly)
- Result
- 8 masked GUIDs, seed 469
- Explanation
- Decrypted; list = Random(469).Next(9)
- Re-checked
- 3DES sidebar MD5 -> masked GUIDs